Dokploy Dokploy

• CVE-2026-45663 Critical 9.9 Dokploy: Remote Code Execution via destinationPath in Container File Upload 1.1%
• CVE-2026-27130 Critical 9.9 Dokploy has Command Injection in its Service Operations 1.2%
• CVE-2026-24841 Critical 9.9 Dokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint 2.8%
• CVE-2026-24840 High 8.0 Dokploy uses hardcoded credentials in installation script, which could result in database access 0.4%
• CVE-2026-24839 Medium 4.7 Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers 0.2%
• CVE-2025-53825 Critical 9.4 Dokploy's Preview Deployments are vulnerable to Remote Code Execution 0.6%
• CVE-2025-53375 Medium 4.9 Dokploy allows attackers to read any file that the Traefik process user can access 0.4%
• CVE-2025-53376 Medium 6.3 Dokploy allows attackers to run arbitrary OS commands on the Dokploy host. 1.1%
• CVE-2025-53374 Low 1.3 Dokploy Improperly Discloses User Information via user.one Endpoint 0.2%